Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PNG · Lotus/images/images/home-3
…
2.53 MB
PNG · Lotus/images/images/home-3
…
2.43 MB
PNG · Lotus/images/images/home/about
…
2.13 MB
PNG · Lotus/images/images/home-3
6076c739fda98395…
1.78 MB
PNG · Lotus/images/images/home-3
7636d0ec5abf2f19…
1.15 MB
PNG · Lotus/images/images/home-3
9a92c5a2a39ef939…
1.12 MB
JPG · Lotus/images/images/banner
b0f28fc8b26e2f91…
811.0 KB
JPG · Lotus/images/images/slider
1f3c4fceaafdebef…
805.0 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
new Function()
Builds a function from a string
Code execution1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.